3 ms·
How is PGP encrypted email any less secure in terms of meta data analysis / eves dropping than a video call or a "text message" likely sent over OTR? Obviously
by anologwintermut 13y ago
How is PGP encrypted email any less secure in terms of meta data analysis / eves dropping than a video call or a "text message" likely sent over OTR?
Obviously, those later two protocols are forward secure and PGP is not, but that doesn't seem to be what the post is dealing with.
Were they worried about key authentication? Did they not do end to end PGP?
- nikster 13y agoIt would be up to the client to install PGP for true end to end encryption. What I was wondering - why don't they keep the email service but reject all emails that are sent without PGP? Then people would have to go through the pain of installing PGP but they would end up with truly secure email.
- anologwintermut 13y agoSilent Circle is a software client and service, not a cloud hosted solution. As such, they can do PGP themselves and (from my understanding) did.
- JshWright 13y agoSilent Mail was not a separate client.
- JshWright 13y agoSilent Mail had to inter-operate with other mail services and users (many of whom have no desire to use PGP). That means we had to touch plaintext at times (even if it was just an incoming message from a non-Silent Mail user, prior to us encrypting it and storing it for our user). It was different from the other products because mail inherently doesn't allow end to end encryption without a lot of manual key management (which is exactly why no one does it). Some day we would love to offer a service that _can_ do that, but email, in it's current form, can't do that for us. Speaking personally, I'm very excited about projects like Adam Langley's Pond.